Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2025-10363

Unauthenticated RCE via .NET Deserialization in Topal Finance Software

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Topal Solutions AG Topal Finanzbuchhaltung

Default version status: unknown

  • 10.1.5.20affected
  • 11.2.12.00unaffected

References